$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer (raw, json) Hash identifier: Y6x2whmHS/i8YCeyTEn8fic7fUr9cDNBR3VOlnzQstk= Subject key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44C9595D20D19441DC63025B3E09FDA4459CE36A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft caRepository: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 Oct 2025 07:28:10 +0000 Certificate not after: Tue 20 Oct 2026 07:33:10 +0000 Subordinate resources: IP: 103.191.200.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c9:59:5d:20:d1:94:41:dc:63:02:5b:3e:09:fd:a4:45:9c:e3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 21 07:28:10 2025 GMT Not After : Oct 20 07:33:10 2026 GMT Subject: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:15:25:84:08:53:d6:47:36:8a:75:47:3e: 12:9a:24:37:1b:83:c8:cc:b6:33:9e:25:ab:ce:cc: 9a:04:d3:c1:96:45:2e:51:18:e6:6a:27:ab:54:32: 00:87:26:a6:50:29:76:66:28:23:30:e6:4d:77:5a: 43:fe:ff:26:26:08:1a:70:32:77:89:29:ee:ab:68: 56:24:c7:00:43:0f:e2:8b:97:c0:c8:02:f5:c1:60: 9b:fc:4a:ac:71:17:ff:5a:fb:4e:d9:d4:30:bc:3d: 21:40:4c:89:53:36:b6:76:56:4d:28:50:df:4e:a2: 44:ca:79:85:94:0f:43:5b:e2:cf:22:25:80:1e:95: 3e:dd:9f:dd:c5:50:c4:40:93:c7:a2:c9:68:8e:70: c9:87:b9:25:cd:fd:82:0e:ce:6d:ad:67:8d:00:65: 74:61:1c:97:8c:80:1f:21:58:13:e1:62:2d:d6:30: 4a:02:a2:3e:c0:f4:c8:32:77:ec:78:7e:ca:21:6b: 32:2d:d8:c8:01:95:d2:82:f4:02:0a:86:25:4f:6d: 0b:e6:93:93:94:d5:17:fa:58:c0:b6:2d:a4:62:f1: e2:d4:68:79:2c:cc:c7:31:04:84:05:7f:ce:0c:80: e1:87:e5:b4:b1:5f:14:03:3c:00:4b:52:19:47:fc: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.200.0/23 Signature Algorithm: sha256WithRSAEncryption 90:3b:64:1c:0d:4b:d8:8d:98:37:70:57:35:db:88:20:8e:e7: e5:bf:8a:6d:94:83:a9:f1:7b:cd:5c:7f:c9:69:b2:97:18:75: 2a:c3:ca:06:c3:1d:c7:db:c2:bc:fe:86:cd:5f:4a:3a:cd:b6: 75:88:12:2c:f3:43:5c:5f:b2:7c:9e:71:6e:cb:f5:4e:96:9e: dd:90:5a:3b:bd:c2:51:f9:ef:ab:f7:a8:c8:43:7c:32:26:d0: 1a:e8:5a:94:88:24:9e:17:1c:42:07:16:b5:86:97:9e:1e:a4: bb:29:b2:86:3b:81:cd:af:07:15:07:41:af:ae:7a:3e:5c:b8: 90:a2:98:29:5e:0c:cd:62:bb:06:3e:ce:a3:e9:41:ea:1b:81: 9d:79:3a:00:a2:43:e6:ab:5e:77:a6:8b:b4:e8:16:a7:9f:8e: 8d:81:2c:b5:11:dc:ab:6d:86:9a:1e:da:e7:3f:3b:ab:fd:dc: 95:f4:3e:e4:b5:b3:8e:c0:60:b4:67:e7:06:04:c4:83:d4:68: 93:12:17:ac:d7:20:43:ff:c8:11:bc:e7:ec:f6:87:0a:1f:71: bf:64:c3:48:13:4c:ae:3f:e2:1a:14:36:04:c5:ae:bc:62:6f: 74:e0:d9:f4:6e:42:a1:89:24:24:2c:58:8e:0f:e7:57:32:36: d4:ab:87:22 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURMlZXSDRlEHcYwJbPgn9pEWc42owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyMTA3MjgxMFoX DTI2MTAyMDA3MzMxMFowMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVE RTRDRTk5NDYzMkMwRDNBMjUwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4hFSWECFPWRzaKdUc+EpokNxuDyMy2M54lq87MmgTTwZZFLlEY5monq1Qy AIcmplApdmYoIzDmTXdaQ/7/JiYIGnAyd4kp7qtoViTHAEMP4ouXwMgC9cFgm/xK rHEX/1r7TtnUMLw9IUBMiVM2tnZWTShQ306iRMp5hZQPQ1vizyIlgB6VPt2f3cVQ xECTx6LJaI5wyYe5Jc39gg7Oba1njQBldGEcl4yAHyFYE+FiLdYwSgKiPsD0yDJ3 7Hh+yiFrMi3YyAGV0oL0AgqGJU9tC+aTk5TVF/pYwLYtpGLx4tRoeSzMxzEEhAV/ zgyA4YfltLFfFAM8AEtSGUf8z5sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNgHtadxbLVtA27eTOmUYywNOiUBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwM2U3MWZl LWFkMzMtNGQxMi04NzIwLTQzMTQzZmYwMWRiZi8wL0Q4MDdCNUE3NzE2Q0I1NkQw MzZFREU0Q0U5OTQ2MzJDMEQzQTI1MDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv8gwDQYJKoZIhvcNAQELBQADggEBAJA7ZBwNS9iNmDdwVzXbiCCO5+W/im2U g6nxe81cf8lpspcYdSrDygbDHcfbwrz+hs1fSjrNtnWIEizzQ1xfsnyecW7L9U6W nt2QWju9wlH576v3qMhDfDIm0BroWpSIJJ4XHEIHFrWGl54epLspsoY7gc2vBxUH Qa+uej5cuJCimCleDM1iuwY+zqPpQeobgZ15OgCiQ+arXnemi7ToFqefjo2BLLUR 3Ktthpoe2uc/O6v93JX0PuS1s47AYLRn5wYExIPUaJMSF6zXIEP/yBG85+z2hwof cb9kw0gTTK4/4hoUNgTFrrxib3Tg2fRuQqGJJCQsWI4P51cyNtSrhyI= -----END CERTIFICATE-----Generated at Wed Nov 5 21:11:04 2025 by rpki-client